Role-Based Restrictions for Incident Status Changes provides administrators with granular control over which user roles can transition incidents to specific statuses within the ePCR workflow. This feature ensures that only authorized personnel can advance incidents through critical stages—particularly those affecting billing, quality assurance, and documentation completion—preventing unauthorized modifications and maintaining workflow integrity throughout the incident lifecycle.
In many EMS agencies, the incident workflow includes multiple stages from initial documentation through final billing. Each stage represents a critical checkpoint in the revenue cycle and compliance process. Without proper controls, any user could inadvertently or intentionally change an incident status, potentially causing billing errors, disrupting QA processes, or creating compliance issues.
This feature addresses these challenges by allowing administrators to define exactly which roles have permission to transition incidents to and from specific statuses. For example, an agency can ensure that only billing staff can mark reports as "Ready for Billing" or "Billed," while field providers maintain access to operational statuses like "In Progress" and "Provider Completed."
Common Use Cases:
Restricting billing-related status changes to billing department staff only
Limiting QA-related statuses to quality assurance team members
Preventing field users from prematurely closing or finalizing reports
Maintaining separation of duties for compliance and audit purposes
Prerequisites:
Existing incident statuses configured in your system
Clearly defined user roles within your department
Understanding of your agency's incident workflow and approval processes
13. Use the toggle switches to configure permissions for each role:
By default, all roles have both "Change To" and "Change From" permissions enabled
Disable toggles to restrict specific roles from these actions
Consider your workflow requirements when setting restrictions
Review your configuration to ensure the correct roles have appropriate permissions.
Click Add to create the new status with the configured role restrictions.
14. How Role Restrictions Are Enforced
- When a user attempts to change an incident status, the system performs the following validation:
- Checks the user's assigned role(s)
- Verifies if the role has "Allow Change To" permission for the target status
- Verifies if the role has "Allow Change From" permission for the current status
- If either permission is denied, displays a warning message and prevents the status change
- Updating Incident Status from the EMS Incident List
- Only the enabled statuses for that role will populate to choose from.
Best Practices
Planning Your Status Restrictions:
Map out your complete incident workflow before configuring restrictions
Identify which roles need access to each status based on job responsibilities
Consider the full lifecycle from initial documentation through final billing
Document your permission structure for training and reference purposes
Separation of Duties:
Restrict billing-related statuses to billing department personnel only
Limit QA/audit statuses to quality assurance team members
Prevent field personnel from accessing administrative or financial statuses
Maintain clear boundaries between operational and administrative functions
Testing and Validation:
Test status changes with users from different roles before full deployment
Verify that restricted users receive clear error messages when attempting unauthorized changes
Ensure critical workflow statuses remain accessible to appropriate personnel
Conduct periodic audits to confirm restrictions align with current workflow needs
Role Management:
Review role assignments regularly to ensure users have appropriate access
Update status restrictions when organizational roles or responsibilities change
Create role-specific training materials explaining which statuses they can modify
Consider creating specialized roles for complex permission requirements
Common Mistakes to Avoid:
Don't over-restrict statuses—ensure users can complete their primary job functions
Avoid creating too many similar statuses with different restrictions (consolidate when possible)
Don't restrict "In Progress" or "Provider Completed" (system prevents this by design)
Don't delete statuses that are actively used in historical incidents
Avoid granting billing status access to non-billing personnel
Troubleshooting & FAQs
Q: I'm trying to change an incident status, but I'm getting an error message saying I don't have permission. What should I do?
A: This means your user role has been restricted from changing to or from that particular status. Contact your system administrator to verify if you need access to that status for your job responsibilities. If access is required, the administrator can modify the role restrictions in the Incident Status Configuration settings.
Q: Can I restrict the "In Progress" or "Provider Completed" statuses?
A: No, these two core statuses are system-locked and always accessible to all roles. This ensures field personnel can always document and complete incident reports regardless of other workflow restrictions. The eye icon next to these statuses indicates they cannot be edited or restricted.
Q: What happens if I deactivate a status that's currently assigned to existing incidents?
A: Deactivating a status makes it unavailable for future status changes, but it does not affect historical incidents that already have that status assigned. Those incidents retain their status value for reporting and compliance purposes. Users will not be able to select the deactivated status when changing incident statuses going forward.
Q: Can a user with multiple role assignments change statuses if one of their roles is restricted?
A: Yes, if a user has multiple roles assigned and at least one of those roles has permission for the status change, the user will be able to perform the action. The system checks all of a user's assigned roles when validating permissions.
Q: I accidentally deleted an incident status. Can I recover it?
A: No, deleted statuses cannot be recovered. However, historical incidents that used that status retain their data. If you need the status again, you must create a new status with the same name and configure its role restrictions. Consider deactivating statuses instead of deleting them if you may need them in the future.
Q: How do I know which roles currently have access to a specific status?
A: Click the edit (pencil) icon next to the status in the Incident Status Configuration screen. The Edit Status modal displays all roles with their current permission settings. Enabled (blue) toggles indicate the role has permission; disabled (gray) toggles indicate restrictions.
Q: Can I bulk edit role restrictions across multiple statuses?
A: Currently, role restrictions must be configured individually for each status. However, you can use the sorting functionality in the role permission columns to quickly review which roles have access across different statuses.
Q: What's the difference between "Allow Change To" and "Allow Change From" permissions?
A: "Allow Change To" controls whether a role can set an incident TO this status (e.g., marking an incident as "Ready for Billing"). "Allow Change From" controls whether a role can change an incident away FROM this status (e.g., moving an incident from "Billed" back to "Under Review"). Both permissions must be enabled for a role to freely move incidents in and out of a status.
Q: Will restricting status changes affect automated workflows or integrations?
A: Role-based restrictions apply to manual user actions within the ePCR system. Automated workflows and system integrations typically operate with elevated permissions and are not subject to these restrictions. Consult with your system administrator or First Due support if you have concerns about specific integrations.